Hacker
Hackers have made mincemeat of browser security

Hacker cracks fully patched Safari in two minutes flat

Safari, Firefox and IE all fail in hacking competition

Iain Thomson in San Francisco

A hacking competition at the CanSecWest security conference in Canada has showcased a plethora of hacking techniques that are able to penetrate fully patched browsers.

Security researcher Charlie Miller won $5,000 (£3,440) and a MacBook Pro after he got through Apple's Safari browser in under two minutes.

Advertisement

"Charlie Miller got the luck of the draw, and had the first time slot for the browser competition. His target was Safari on Mac OS X," said Terri Forslof, from network security firm TippingPoint, which runs the competition.

"It was over within two minutes, and Charlie (coincidentally also last year's first winner of the day) is now the proud owner of yet another MacBook, and $5,000 from the Zero Day Initiative."

Another contestant, a master's student going under the name 'Nils', managed a similar trick with Safari, but also cracked Internet Explorer and Firefox using malware embedded in a web page.

He ended up winning $15,000 (£10,300) and three laptops for his efforts. He will also be attempting to perform a similar hack on Google's Chrome browser.

Attempts to crack mobile browsers, which comes with a prize of $10,000 (£6,880) per hack, have so far proved unsuccessful.

TippingPoint is also offering $5,000 prizes for the Most Interesting Browser Flaw, Most Interesting Mobile Device Flaw, and Best in Show.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Further reading

Hacker

Security experts warn of 'staggering' rise in malware

Research shows economic slump prompting surge in online criminality

Sarah Palin

Student pleads not guilty to Sarah Palin email hack

David Kernell faces 20 years in prison if convicted

Google squashes Trends malware attacks

Dodgy pages pulled from the search index

Scammers hijack Jack Straw's email

Hotmail address used to run money scams

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

V3.co.uk weekly debrief, 5 Feb 2010

This week we cover the continuing controversy surrounding the Orange T-Mobile deal

Analysis and Reports

Using managed services to protect mobile data users from the latest security threats

Counting the cost of data security: the benefits of secured mobile services

Shifting Disaster Recovery targets with SharePoint and SQL server configurations

Using a hostbased recovery system for mission-critical systems

Poll

Adobe Flash poll

Adobe Flash poll

Do you agree with Steve Jobs about Flash being buggy?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Windows 7

Microsoft denies Windows 7 battery problems

Replacement warning functioning normally, claims software giant

Safer Internet Day

Safer Internet Day highlights online threats

Annual initiative warns of phishing, ID theft and social network...

AMD Fusion

AMD details Fusion innovations at ISSCC

Forthcoming chip with four CPU and one GPU cores will...

MSI Wind U135

Review: MSI Wind U135 netbook

A decent netbook incorporating the latest Intel technology in a...

Primary Navigation